From: Yoann Congal <yoann.congal@smile.fr>
To: openembedded-core@lists.openembedded.org
Subject: [OE-core][scarthgap 00/33] Patch review
Date: Mon, 20 Jul 2026 19:22:33 +0200 [thread overview]
Message-ID: <cover.1784567958.git.yoann.congal@smile.fr> (raw)
Please review this set of changes for scarthgap and have comments back by
end of day Wednesday, July 22.
Passed a-full on autobuilder:
https://autobuilder.yoctoproject.org/valkyrie/?#/builders/29/builds/4248
oe-selftest-armhost, oe-selftest-debian and oe-selftest-fedora failed
with 15289 – [scarthgap] AB-INT: sstatetests.SStatePrintdiff.test_gcc_runtime_vs_gcc_source failure
oe-selftest-debian was rebuilt on a isolated sstate/hashserv here:
https://autobuilder.yoctoproject.org/valkyrie/?#/builders/35/builds/4333
The following changes since commit 8aca19cff468c5f15c919c973c46be58e020af46:
cve-update: Avoid NFS caching issues (2026-07-17 12:05:24 +0200)
are available in the Git repository at:
https://git.openembedded.org/openembedded-core-contrib stable/scarthgap-nut
https://git.openembedded.org/openembedded-core-contrib/log/?h=stable/scarthgap-nut
for you to fetch changes up to 9a7f92f2dce94876fa63ce8625d53444a9a706aa:
glibc-testsuite: Do not generate SPDX (2026-07-20 13:50:16 +0200)
----------------------------------------------------------------
Aleksandar Nikolic (1):
wic: Fix updating fstab for nvme devices
Ankur Tyagi (3):
wireless-regdb: upgrade 2026.02.04 -> 2026.03.18
wireless-regdb: upgrade 2026.03.18 -> 2026.05.30
ca-certificates: upgrade 20260223 -> 20260601
Ashishkumar Parmar (1):
bind: Upgrade 9.18.44 -> 9.18.49
Benjamin Robin (Schneider Electric) (4):
python3: fix CVE-2026-11940
python3: fix CVE-2026-11972
python3: fix CVE-2026-9669
glib-2.0: fix CVE-2026-58016
Deepak Rathore (1):
util-linux: fix CVE-2026-13595
Eric Meyers (1):
create-spdx-image-3.0: correct SSTATE_SKIP_CREATION key for
do_create_image_sbom_spdx
Harish Sadineni (1):
binutils: Add CVE-2025-69646 to "CVE:" tag
Hitendra Prajapati (1):
vim: Fix for CVE-2026-52858,CVE-2026-52859,CVE-2026-52860
Hongxu Jia (1):
bzip2: fix 'bzip2 --version > /tmp/aaa 2>&1' hang
Hugo SIMELIERE (Schneider Electric) (1):
libcap: Fix CVE-2026-4878
Jaipaul Cheernam (3):
glibc: stable 2.39 branch updates
bzip2: Fix CVE-2026-42250
gzip: fix CVE-2026-41992
Joshua Watt (1):
glibc-testsuite: Do not generate SPDX
Kris Gavvala (1):
python3: skiptest tracemalloc_track_race
Mathieu Dubois-Briand (1):
python3: Simplify ptest exclusion list
Mike Crowe (1):
dropbear: Disable DSS correctly
Peter Marko (4):
socat: patch CVE-2026-56123
vex: remove obsolete semicolon
rootfs: move tasks using image_list_installed_packages to
postuninstall
expat: patch CVE-2026-41080
Roland Kovacs (2):
binutils: fix CVE-2025-69649, and CVE-2025-69652
binutils: fix CVE-2025-69645
Ross Burton (1):
xmlto: update SRC_URI
Sudhir Dumbhare (2):
python3-urllib3: fix CVE-2026-44431
openssh: set status for CVE-2026-3497
Theo Gaige (1):
expat: patch CVE-2026-45186
Vijay Anusuri (1):
tzdata/tzcode-native: upgrade 2026b -> 2026c
.../create-spdx-image-3.0.bbclass | 2 +-
meta/classes-recipe/license_image.bbclass | 2 +-
meta/classes-recipe/nospdx.bbclass | 2 +-
meta/classes/vex.bbclass | 2 +-
.../bind/{bind_9.18.44.bb => bind_9.18.49.bb} | 2 +-
.../openssh/openssh_9.6p1.bb | 1 +
.../socat/files/CVE-2026-56123.patch | 150 ++++++
.../socat/socat_1.8.0.0.bb | 1 +
...PBEAR_DSS-is-only-forced-for-fuzzing.patch | 30 ++
.../recipes-core/dropbear/dropbear_2022.83.bb | 1 +
.../expat/expat/CVE-2026-41080-01.patch | 50 ++
.../expat/expat/CVE-2026-41080-02.patch | 29 ++
.../expat/expat/CVE-2026-41080-03.patch | 467 ++++++++++++++++++
.../expat/expat/CVE-2026-45186-01.patch | 70 +++
.../expat/expat/CVE-2026-45186-02.patch | 318 ++++++++++++
.../expat/expat/CVE-2026-45186-03.patch | 46 ++
.../expat/expat/CVE-2026-45186-04.patch | 32 ++
.../expat/expat/CVE-2026-45186-05.patch | 32 ++
.../expat/expat/CVE-2026-45186-06.patch | 87 ++++
.../expat/expat/CVE-2026-45186-07.patch | 52 ++
meta/recipes-core/expat/expat_2.6.4.bb | 10 +
.../glib-2.0/glib-2.0/CVE-2026-58016-1.patch | 94 ++++
.../glib-2.0/glib-2.0/CVE-2026-58016-2.patch | 98 ++++
meta/recipes-core/glib-2.0/glib-2.0_2.78.6.bb | 2 +
.../glibc/glibc-testsuite_2.39.bb | 1 +
meta/recipes-core/glibc/glibc-version.inc | 2 +-
meta/recipes-core/glibc/glibc_2.39.bb | 3 +-
meta/recipes-core/util-linux/util-linux.inc | 1 +
.../util-linux/CVE-2026-13595.patch | 157 ++++++
.../binutils/binutils-2.42.inc | 3 +
.../binutils/binutils/CVE-2025-69645.patch | 135 +++++
.../binutils/binutils/CVE-2025-69648.patch | 2 +-
.../binutils/binutils/CVE-2025-69649.patch | 44 ++
.../binutils/binutils/CVE-2025-69652.patch | 39 ++
.../python3-urllib3/CVE-2026-44431.patch | 163 ++++++
.../python/python3-urllib3_2.2.2.bb | 1 +
.../python/python3/CVE-2026-11940.patch | 66 +++
.../python/python3/CVE-2026-11972.patch | 60 +++
.../python/python3/CVE-2026-9669.patch | 96 ++++
.../python/python3_3.12.13.bb | 23 +-
meta/recipes-devtools/xmlto/xmlto_0.0.28.bb | 2 +-
...-fix-bzip2-version-tmp-aaa-will-hang.patch | 62 +++
.../bzip2/bzip2/CVE-2026-42250.patch | 35 ++
meta/recipes-extended/bzip2/bzip2_1.0.8.bb | 2 +
.../gzip/gzip-1.13/CVE-2026-41992.patch | 64 +++
meta/recipes-extended/gzip/gzip_1.13.bb | 1 +
meta/recipes-extended/timezone/timezone.inc | 6 +-
....02.04.bb => wireless-regdb_2026.05.30.bb} | 2 +-
...0260223.bb => ca-certificates_20260601.bb} | 4 +-
.../libcap/files/CVE-2026-4878.patch | 164 ++++++
meta/recipes-support/libcap/libcap_2.69.bb | 1 +
.../vim/files/CVE-2026-52858.patch | 167 +++++++
.../vim/files/CVE-2026-52859.patch | 274 ++++++++++
.../vim/files/CVE-2026-52860.patch | 446 +++++++++++++++++
meta/recipes-support/vim/vim.inc | 3 +
scripts/lib/wic/plugins/imager/direct.py | 6 +-
56 files changed, 3595 insertions(+), 20 deletions(-)
rename meta/recipes-connectivity/bind/{bind_9.18.44.bb => bind_9.18.49.bb} (97%)
create mode 100644 meta/recipes-connectivity/socat/files/CVE-2026-56123.patch
create mode 100644 meta/recipes-core/dropbear/dropbear/0001-Fix-so-DROPBEAR_DSS-is-only-forced-for-fuzzing.patch
create mode 100644 meta/recipes-core/expat/expat/CVE-2026-41080-01.patch
create mode 100644 meta/recipes-core/expat/expat/CVE-2026-41080-02.patch
create mode 100644 meta/recipes-core/expat/expat/CVE-2026-41080-03.patch
create mode 100644 meta/recipes-core/expat/expat/CVE-2026-45186-01.patch
create mode 100644 meta/recipes-core/expat/expat/CVE-2026-45186-02.patch
create mode 100644 meta/recipes-core/expat/expat/CVE-2026-45186-03.patch
create mode 100644 meta/recipes-core/expat/expat/CVE-2026-45186-04.patch
create mode 100644 meta/recipes-core/expat/expat/CVE-2026-45186-05.patch
create mode 100644 meta/recipes-core/expat/expat/CVE-2026-45186-06.patch
create mode 100644 meta/recipes-core/expat/expat/CVE-2026-45186-07.patch
create mode 100644 meta/recipes-core/glib-2.0/glib-2.0/CVE-2026-58016-1.patch
create mode 100644 meta/recipes-core/glib-2.0/glib-2.0/CVE-2026-58016-2.patch
create mode 100644 meta/recipes-core/util-linux/util-linux/CVE-2026-13595.patch
create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2025-69645.patch
create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2025-69649.patch
create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2025-69652.patch
create mode 100644 meta/recipes-devtools/python/python3-urllib3/CVE-2026-44431.patch
create mode 100644 meta/recipes-devtools/python/python3/CVE-2026-11940.patch
create mode 100644 meta/recipes-devtools/python/python3/CVE-2026-11972.patch
create mode 100644 meta/recipes-devtools/python/python3/CVE-2026-9669.patch
create mode 100644 meta/recipes-extended/bzip2/bzip2/0001-fix-bzip2-version-tmp-aaa-will-hang.patch
create mode 100644 meta/recipes-extended/bzip2/bzip2/CVE-2026-42250.patch
create mode 100644 meta/recipes-extended/gzip/gzip-1.13/CVE-2026-41992.patch
rename meta/recipes-kernel/wireless-regdb/{wireless-regdb_2026.02.04.bb => wireless-regdb_2026.05.30.bb} (94%)
rename meta/recipes-support/ca-certificates/{ca-certificates_20260223.bb => ca-certificates_20260601.bb} (94%)
create mode 100644 meta/recipes-support/libcap/files/CVE-2026-4878.patch
create mode 100644 meta/recipes-support/vim/files/CVE-2026-52858.patch
create mode 100644 meta/recipes-support/vim/files/CVE-2026-52859.patch
create mode 100644 meta/recipes-support/vim/files/CVE-2026-52860.patch
next reply other threads:[~2026-07-20 17:23 UTC|newest]
Thread overview: 38+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-07-20 17:22 Yoann Congal [this message]
2026-07-20 17:22 ` [OE-core][scarthgap 01/33] create-spdx-image-3.0: correct SSTATE_SKIP_CREATION key for do_create_image_sbom_spdx Yoann Congal
2026-07-20 17:22 ` [OE-core][scarthgap 02/33] glibc: stable 2.39 branch updates Yoann Congal
2026-07-20 17:22 ` [OE-core][scarthgap 03/33] bind: Upgrade 9.18.44 -> 9.18.49 Yoann Congal
2026-07-20 17:22 ` [OE-core][scarthgap 04/33] binutils: fix CVE-2025-69649, and CVE-2025-69652 Yoann Congal
2026-07-20 17:22 ` [OE-core][scarthgap 05/33] binutils: fix CVE-2025-69645 Yoann Congal
2026-07-20 17:22 ` [OE-core][scarthgap 06/33] python3: Simplify ptest exclusion list Yoann Congal
2026-07-20 17:22 ` [OE-core][scarthgap 07/33] python3: skiptest tracemalloc_track_race Yoann Congal
2026-07-20 17:22 ` [OE-core][scarthgap 08/33] python3: fix CVE-2026-11940 Yoann Congal
2026-07-20 17:22 ` [OE-core][scarthgap 09/33] python3: fix CVE-2026-11972 Yoann Congal
2026-07-20 17:22 ` [OE-core][scarthgap 10/33] python3: fix CVE-2026-9669 Yoann Congal
2026-07-20 17:22 ` [OE-core][scarthgap 11/33] bzip2: Fix CVE-2026-42250 Yoann Congal
2026-07-20 17:22 ` [OE-core][scarthgap 12/33] bzip2: fix 'bzip2 --version > /tmp/aaa 2>&1' hang Yoann Congal
2026-07-20 19:14 ` Paul Barker
2026-07-21 7:59 ` Jaipaul Cheernam
2026-07-20 17:22 ` [OE-core][scarthgap 13/33] dropbear: Disable DSS correctly Yoann Congal
2026-07-20 19:35 ` Paul Barker
2026-07-20 17:22 ` [OE-core][scarthgap 14/33] socat: patch CVE-2026-56123 Yoann Congal
2026-07-20 17:22 ` [OE-core][scarthgap 15/33] vex: remove obsolete semicolon Yoann Congal
2026-07-20 17:22 ` [OE-core][scarthgap 16/33] rootfs: move tasks using image_list_installed_packages to postuninstall Yoann Congal
2026-07-20 17:22 ` [OE-core][scarthgap 17/33] gzip: fix CVE-2026-41992 Yoann Congal
2026-07-20 17:22 ` [OE-core][scarthgap 18/33] util-linux: fix CVE-2026-13595 Yoann Congal
2026-07-20 17:22 ` [OE-core][scarthgap 19/33] tzdata/tzcode-native: upgrade 2026b -> 2026c Yoann Congal
2026-07-20 17:22 ` [OE-core][scarthgap 20/33] expat: patch CVE-2026-41080 Yoann Congal
2026-07-20 17:22 ` [OE-core][scarthgap 21/33] expat: patch CVE-2026-45186 Yoann Congal
2026-07-20 17:22 ` [OE-core][scarthgap 22/33] libcap: Fix CVE-2026-4878 Yoann Congal
2026-07-20 17:22 ` [OE-core][scarthgap 23/33] python3-urllib3: fix CVE-2026-44431 Yoann Congal
2026-07-20 17:22 ` [OE-core][scarthgap 24/33] wic: Fix updating fstab for nvme devices Yoann Congal
2026-07-20 17:22 ` [OE-core][scarthgap 25/33] openssh: set status for CVE-2026-3497 Yoann Congal
2026-07-20 17:22 ` [OE-core][scarthgap 26/33] vim: Fix for CVE-2026-52858,CVE-2026-52859,CVE-2026-52860 Yoann Congal
2026-07-20 17:23 ` [OE-core][scarthgap 27/33] glib-2.0: fix CVE-2026-58016 Yoann Congal
2026-07-20 17:23 ` [OE-core][scarthgap 28/33] xmlto: update SRC_URI Yoann Congal
2026-07-20 17:23 ` [OE-core][scarthgap 29/33] wireless-regdb: upgrade 2026.02.04 -> 2026.03.18 Yoann Congal
2026-07-20 17:23 ` [OE-core][scarthgap 30/33] wireless-regdb: upgrade 2026.03.18 -> 2026.05.30 Yoann Congal
2026-07-20 17:23 ` [OE-core][scarthgap 31/33] ca-certificates: upgrade 20260223 -> 20260601 Yoann Congal
2026-07-20 17:23 ` [OE-core][scarthgap 32/33] binutils: Add CVE-2025-69646 to "CVE:" tag Yoann Congal
2026-07-20 17:23 ` [OE-core][scarthgap 33/33] glibc-testsuite: Do not generate SPDX Yoann Congal
-- strict thread matches above, loose matches on Subject: below --
2025-08-27 21:29 [OE-core][scarthgap 00/33] Patch review Steve Sakoman
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=cover.1784567958.git.yoann.congal@smile.fr \
--to=yoann.congal@smile.fr \
--cc=openembedded-core@lists.openembedded.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox